| Lab 3.3.4.1 Creating VLANs - Overview Estimated time: 45 min. Objectives: This Lab will focus on your ability to accomplish the following tasks: Console into the switch to determine the firmware version Check the IP address and subnet mask for the switch Use the Management console to check VLAN related menu options Check workstation network settings to verify compatibility with switch and router settings Create a new VLAN, name it and move member ports to it. Test VLANs functionality by moving a workstation from one VLAN to another Background: In this lab you will work with Ethernet Virtual Local Area Networks or VLANs. VLANs can be used to separate groups of users based on function rather than physical location. Normally all of the ports on a switch are in the same default VLAN 1. A Network Administrator can create additional VLANs and move some ports into those VLANs to create isolated groups of users regardless of where they are physically located. This creates smaller broadcast domains which helps to reduce and localize network traffic. If a switch with 24 ports is divided into 2 VLANs of 12 ports each, the users on one VLAN will not be able to access resources (such as servers or printers) on the other VLAN. VLANs can also be created using ports from multiple switches that are “trunked” together on a backbone. In order for two VLANs to communicate they must be connected by a router. Security can be controlled using router Access Control Lists (ACLs) which will be covered in a future lab. You will console into the switch and use the Management Console User Interface menus to view the options available to manage VLANs and will check the current VLAN configuration. You will also use Telnet to access the switch and check some settings as well as move your connection from one VLAN to another to determine the affects of the "Management Domain". When managing a switch, the Management Domain is always VLAN 1. The Network Administrator's workstation must have access to a port in the VLAN 1 Management Domain. All ports are assigned to VLAN 1 by default. This lab will also help demonstrate how VLANs can be used to separate traffic and reduce broadcast domains. Tools / Preparation: Prior to starting the lab, the teacher or lab assistant should have a switch available with the default VLAN settings. A workstation with HyperTerminal should be available to console into the switch and an Ethernet connection should be available to Telnet into the switch. Since there may be only one switch available, the instructor should demonstrate this lab at a minimum and students should work in larger teams to get hands on. While one team is doing switch labs the others could be doing web-based research on switches at the Cisco web site URLs listed below. Before beginning this lab you should read the Networking Academy Second Year Companion Guide, Chapter 3 - VLANs. You should also review Semester 3 On-line Lesson 3. Following is a list of equipment required. Two Windows PC workstations w/ HyperTerminal installed (configured for console connection to switch and compatible IP addresses) Cisco Switch (19xx or 28xx model) Console Cable (roll-over) and DB-9/RJ45 adapter or DB-9 null modem cable CAT 5 Ethernet Cable from each workstation to a switch Ethernet port Web Site Resources: LAN Switching basics General information on all Cisco products - (Scroll down to chapter 16 - Switches) 1900 / 2820 series Ethernet switches 2900 series Fast Ethernet switches 3500 series Gigabit Ethernet switches Virtual LANs for 1900/2820 Switches Notes: Step 1 - Console into the LAN switch. Console into the switch by attaching the workstation serial port to the switch console port with the rollover cable and answer the following questions. Use the switch attached to Router Lab-A or other another one (Note: Answers will vary depending on switch model number) 1. What is the model number of the switch? 2. Does this switch have standard edition or Enterprise edition software? 3. What is the Firmware version of the switch? 4. What option on the switch menu is used to create or modify VLANS? Step 2 - Check the IP address of the router, the switch and the attached workstations. 5. Check the IP address and subnet mask of the router, switch and workstations to verify that they are compatible and on the same network. If the switch is connected to Router Lab-A, Interface E1 as shown in the standard lab setup diagram then assign IP addresses, subnet masks and default gateways as appropriate. Record your settings below:
Router IP: | ______________ | Subnet Mask: | _______________ |  |
Switch IP: | ______________ | Subnet Mask: | _______________ |  |
Wkstn 1 IP: | ______________ | Subnet Mask: | _______________ | Def. Gateway: | _______________
Wkstn 2 IP: | ______________ | Subnet Mask: | _______________ | Def. Gateway: | _______________
Step 3 - Enter VLAN configuration mode. 6. What is the maximum number of VLANS you can create? 7. Select the [L] List VLANs option from the submenu and then enter the word ALL. What VLANS are currently listed? 8. List the options on the VLAN configuration menu and sub-menus in the following table: VLAN Menu Options from a Cisco Catalyst 1912 (10Mbps) Ethernet Switch
Menu Opt. | VLAN Menu Option Description | Sub-menu options (list two or more)
Step 4 - Using the VLAN menu options, configure the VLANs. NOTE: The following steps were performed on a Catalyst 1912 WS-C1912C-EN (12-port) switch with Enterprise Edition firmware version V8.01.02. Your answers may vary. 9. Check the configuration of the default VLAN by selecting [M] Modify VLANs option and then select VLAN 1. What are the current member ports in VLAN 1? 10. Create a new Ethernet VLAN and name it. Give it a name (eg: your last name plus an number: smith1). What name did you give it? 11. What is the VLAN number for your new VLAN? 12. List the steps required to create and name the new VLAN: 13. Assign ports 7 thru 12 and port B to the your new VLAN: List the steps required to do this: 14. Check VLAN 1 again. What changes do you see? Exit out to the main menu, then to the Management Console. Step 5 - Test the functionality of the 2 VLANs. To see your VLAN in action, set up two workstations and verify that the IP addresses are on the same subnetwork (See Step 2). Restart computers as needed. From Workstation 1, plug the Ethernet cable from the NIC card into a port from 1-6 on the switch. From Workstation 2, plug the Ethernet cable from the NIC card into a port from 1-6 on the switch. 15. Issue a ping to each workstation. Was the ping successful? 16. Now take Workstation 2's Ethernet port from the switch and plug it into one of the ports on VLAN 2 (ports 7-12). Ping each workstation again. Was the ping successful?